{"schemaVersion":3,"id":"SUSE-SU-2019:1122-1","aliases":[],"status":"published","duplicateOf":null,"title":null,"description":"Security update for hostinfo, supportutils\n\nThis update for hostinfo, supportutils fixes the following issues:\n\nSecurity issues fixed for supportutils:\n\n- CVE-2018-19640: Fixed an issue where  users could kill arbitrary processes (bsc#1118463).\n- CVE-2018-19638: Fixed an issue where users could overwrite arbitrary log files (bsc#1118460).\n- CVE-2018-19639: Fixed a code execution if run with -v (bsc#1118462).\n- CVE-2018-19637: Fixed an issue where static temporary filename could allow overwriting of files (bsc#1117776).\n- CVE-2018-19636: Fixed a local root exploit via inclusion of attacker controlled shell script (bsc#1117751).\n\nOther issues fixed for supportutils:\n\n- Fixed invalid exit code commands (bsc#1125666)\n- SUSE separation in supportconfig (bsc#1125623)\n- Clarified supportconfig(8) -x option (bsc#1115245)\n- supportconfig: 3.0.127\n- btrfs filesystem usage\n- List products.d\n- Dump lsof errors\n- Added ha commands for corosync\n- Dumped find errors in ib_info\n\nIssues fixed in hostinfo:\n- Removed extra kernel install dates (bsc#1099498)\n- Resolved network bond issue (bsc#1054979)","dates":{"published":"2019-04-30T16:04:21.000Z","modified":"2026-02-04T02:26:12.378Z","reserved":null,"kevAdded":[],"kevDue":[]},"cvss":{"headline":{"score":null,"severity":"unknown","version":null,"versionLabel":null,"source":null,"vector":null,"computed":false,"selection":"none"},"metrics":[]},"epss":{"probability":null,"percentile":null,"severity":"unknown","asOf":null,"change":{"pp":null,"baselineDate":null,"baselineScore":null},"history":[],"last30":[]},"kev":{"state":"not-listed","entries":[],"listedCount":0,"totalCatalogs":3,"catalogs":[{"source":"cisa","label":"CISA","listed":false,"entry":null},{"source":"enisa","label":"ENISA","listed":false,"entry":null},{"source":"circl","label":"CIRCL","listed":false,"entry":null}]},"ransomware":{"state":"none-recorded","sources":[]},"exploits":[],"exploitCount":0,"weaknesses":[],"affected":[{"vendor":"suse","product":"hostinfo&distro=SUSE Enterprise Storage 4","name":"hostinfo","label":"hostinfo&distro=SUSE Enterprise Storage 4","ecosystem":"SUSE Linux Enterprise","cpePart":null,"purl":"pkg:rpm/suse/hostinfo&distro=SUSE Enterprise Storage 4","purlType":"rpm","versions":[{"text":"< 1.0.1-19.5.1","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 1.0.1-19.5.1","eol":null,"hubHref":null},{"vendor":"suse","product":"hostinfo&distro=SUSE Linux Enterprise Server 12 SP1-LTSS","name":"hostinfo","label":"hostinfo&distro=SUSE Linux Enterprise Server 12 SP1-LTSS","ecosystem":"SUSE Linux Enterprise","cpePart":null,"purl":"pkg:rpm/suse/hostinfo&distro=SUSE Linux Enterprise Server 12 SP1-LTSS","purlType":"rpm","versions":[{"text":"< 1.0.1-19.5.1","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 1.0.1-19.5.1","eol":null,"hubHref":null},{"vendor":"suse","product":"hostinfo&distro=SUSE Linux Enterprise Server 12 SP2-BCL","name":"hostinfo","label":"hostinfo&distro=SUSE Linux Enterprise Server 12 SP2-BCL","ecosystem":"SUSE Linux Enterprise","cpePart":null,"purl":"pkg:rpm/suse/hostinfo&distro=SUSE Linux Enterprise Server 12 SP2-BCL","purlType":"rpm","versions":[{"text":"< 1.0.1-19.5.1","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 1.0.1-19.5.1","eol":null,"hubHref":null},{"vendor":"suse","product":"hostinfo&distro=SUSE Linux Enterprise Server 12 SP2-LTSS","name":"hostinfo","label":"hostinfo&distro=SUSE Linux Enterprise Server 12 SP2-LTSS","ecosystem":"SUSE Linux Enterprise","cpePart":null,"purl":"pkg:rpm/suse/hostinfo&distro=SUSE Linux Enterprise Server 12 SP2-LTSS","purlType":"rpm","versions":[{"text":"< 1.0.1-19.5.1","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 1.0.1-19.5.1","eol":null,"hubHref":null},{"vendor":"suse","product":"hostinfo&distro=SUSE Linux Enterprise Server 12 SP3","name":"hostinfo","label":"hostinfo&distro=SUSE Linux Enterprise Server 12 SP3","ecosystem":"SUSE Linux Enterprise","cpePart":null,"purl":"pkg:rpm/suse/hostinfo&distro=SUSE Linux Enterprise Server 12 SP3","purlType":"rpm","versions":[{"text":"< 1.0.1-19.5.1","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 1.0.1-19.5.1","eol":null,"hubHref":null},{"vendor":"suse","product":"hostinfo&distro=SUSE Linux Enterprise Server 12 SP4","name":"hostinfo","label":"hostinfo&distro=SUSE Linux Enterprise Server 12 SP4","ecosystem":"SUSE Linux Enterprise","cpePart":null,"purl":"pkg:rpm/suse/hostinfo&distro=SUSE Linux Enterprise Server 12 SP4","purlType":"rpm","versions":[{"text":"< 1.0.1-19.5.1","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 1.0.1-19.5.1","eol":null,"hubHref":null},{"vendor":"suse","product":"hostinfo&distro=SUSE Linux Enterprise Server 12-LTSS","name":"hostinfo","label":"hostinfo&distro=SUSE Linux Enterprise Server 12-LTSS","ecosystem":"SUSE Linux Enterprise","cpePart":null,"purl":"pkg:rpm/suse/hostinfo&distro=SUSE Linux Enterprise Server 12-LTSS","purlType":"rpm","versions":[{"text":"< 1.0.1-19.5.1","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 1.0.1-19.5.1","eol":null,"hubHref":null},{"vendor":"suse","product":"hostinfo&distro=SUSE Linux Enterprise Server for SAP Applications 12 SP2","name":"hostinfo","label":"hostinfo&distro=SUSE Linux Enterprise Server for SAP Applications 12 SP2","ecosystem":"SUSE Linux Enterprise","cpePart":null,"purl":"pkg:rpm/suse/hostinfo&distro=SUSE Linux Enterprise Server for SAP Applications 12 SP2","purlType":"rpm","versions":[{"text":"< 1.0.1-19.5.1","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 1.0.1-19.5.1","eol":null,"hubHref":null},{"vendor":"suse","product":"hostinfo&distro=SUSE Linux Enterprise Server for SAP Applications 12 SP3","name":"hostinfo","label":"hostinfo&distro=SUSE Linux Enterprise Server for SAP Applications 12 SP3","ecosystem":"SUSE Linux Enterprise","cpePart":null,"purl":"pkg:rpm/suse/hostinfo&distro=SUSE Linux Enterprise Server for SAP Applications 12 SP3","purlType":"rpm","versions":[{"text":"< 1.0.1-19.5.1","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 1.0.1-19.5.1","eol":null,"hubHref":null},{"vendor":"suse","product":"hostinfo&distro=SUSE Linux Enterprise Server for SAP Applications 12 SP4","name":"hostinfo","label":"hostinfo&distro=SUSE Linux Enterprise Server for SAP Applications 12 SP4","ecosystem":"SUSE Linux Enterprise","cpePart":null,"purl":"pkg:rpm/suse/hostinfo&distro=SUSE Linux Enterprise Server for SAP Applications 12 SP4","purlType":"rpm","versions":[{"text":"< 1.0.1-19.5.1","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 1.0.1-19.5.1","eol":null,"hubHref":null},{"vendor":"suse","product":"hostinfo&distro=SUSE OpenStack Cloud 7","name":"hostinfo","label":"hostinfo&distro=SUSE OpenStack Cloud 7","ecosystem":"SUSE Linux Enterprise","cpePart":null,"purl":"pkg:rpm/suse/hostinfo&distro=SUSE OpenStack Cloud 7","purlType":"rpm","versions":[{"text":"< 1.0.1-19.5.1","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 1.0.1-19.5.1","eol":null,"hubHref":null},{"vendor":"suse","product":"supportutils&distro=SUSE Enterprise Storage 4","name":"supportutils","label":"supportutils&distro=SUSE Enterprise Storage 4","ecosystem":"SUSE Linux Enterprise","cpePart":null,"purl":"pkg:rpm/suse/supportutils&distro=SUSE Enterprise Storage 4","purlType":"rpm","versions":[{"text":"< 3.0-95.21.1","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 3.0-95.21.1","eol":null,"hubHref":null},{"vendor":"suse","product":"supportutils&distro=SUSE Linux Enterprise Desktop 12 SP3","name":"supportutils","label":"supportutils&distro=SUSE Linux Enterprise Desktop 12 SP3","ecosystem":"SUSE Linux Enterprise","cpePart":null,"purl":"pkg:rpm/suse/supportutils&distro=SUSE Linux Enterprise Desktop 12 SP3","purlType":"rpm","versions":[{"text":"< 3.0-95.21.1","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 3.0-95.21.1","eol":null,"hubHref":null},{"vendor":"suse","product":"supportutils&distro=SUSE Linux Enterprise Desktop 12 SP4","name":"supportutils","label":"supportutils&distro=SUSE Linux Enterprise Desktop 12 SP4","ecosystem":"SUSE Linux Enterprise","cpePart":null,"purl":"pkg:rpm/suse/supportutils&distro=SUSE Linux Enterprise Desktop 12 SP4","purlType":"rpm","versions":[{"text":"< 3.0-95.21.1","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 3.0-95.21.1","eol":null,"hubHref":null},{"vendor":"suse","product":"supportutils&distro=SUSE Linux Enterprise Server 12 SP1-LTSS","name":"supportutils","label":"supportutils&distro=SUSE Linux Enterprise Server 12 SP1-LTSS","ecosystem":"SUSE Linux Enterprise","cpePart":null,"purl":"pkg:rpm/suse/supportutils&distro=SUSE Linux Enterprise Server 12 SP1-LTSS","purlType":"rpm","versions":[{"text":"< 3.0-95.21.1","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 3.0-95.21.1","eol":null,"hubHref":null},{"vendor":"suse","product":"supportutils&distro=SUSE Linux Enterprise Server 12 SP2-BCL","name":"supportutils","label":"supportutils&distro=SUSE Linux Enterprise Server 12 SP2-BCL","ecosystem":"SUSE Linux Enterprise","cpePart":null,"purl":"pkg:rpm/suse/supportutils&distro=SUSE Linux Enterprise Server 12 SP2-BCL","purlType":"rpm","versions":[{"text":"< 3.0-95.21.1","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 3.0-95.21.1","eol":null,"hubHref":null},{"vendor":"suse","product":"supportutils&distro=SUSE Linux Enterprise Server 12 SP2-LTSS","name":"supportutils","label":"supportutils&distro=SUSE Linux Enterprise Server 12 SP2-LTSS","ecosystem":"SUSE Linux Enterprise","cpePart":null,"purl":"pkg:rpm/suse/supportutils&distro=SUSE Linux Enterprise Server 12 SP2-LTSS","purlType":"rpm","versions":[{"text":"< 3.0-95.21.1","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 3.0-95.21.1","eol":null,"hubHref":null},{"vendor":"suse","product":"supportutils&distro=SUSE Linux Enterprise Server 12 SP3","name":"supportutils","label":"supportutils&distro=SUSE Linux Enterprise Server 12 SP3","ecosystem":"SUSE Linux Enterprise","cpePart":null,"purl":"pkg:rpm/suse/supportutils&distro=SUSE Linux Enterprise Server 12 SP3","purlType":"rpm","versions":[{"text":"< 3.0-95.21.1","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 3.0-95.21.1","eol":null,"hubHref":null},{"vendor":"suse","product":"supportutils&distro=SUSE Linux Enterprise Server 12 SP4","name":"supportutils","label":"supportutils&distro=SUSE Linux Enterprise Server 12 SP4","ecosystem":"SUSE Linux Enterprise","cpePart":null,"purl":"pkg:rpm/suse/supportutils&distro=SUSE Linux Enterprise Server 12 SP4","purlType":"rpm","versions":[{"text":"< 3.0-95.21.1","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 3.0-95.21.1","eol":null,"hubHref":null},{"vendor":"suse","product":"supportutils&distro=SUSE Linux Enterprise Server 12-LTSS","name":"supportutils","label":"supportutils&distro=SUSE Linux Enterprise Server 12-LTSS","ecosystem":"SUSE Linux Enterprise","cpePart":null,"purl":"pkg:rpm/suse/supportutils&distro=SUSE Linux Enterprise Server 12-LTSS","purlType":"rpm","versions":[{"text":"< 3.0-95.21.1","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 3.0-95.21.1","eol":null,"hubHref":null},{"vendor":"suse","product":"supportutils&distro=SUSE Linux Enterprise Server for SAP Applications 12 SP2","name":"supportutils","label":"supportutils&distro=SUSE Linux Enterprise Server for SAP Applications 12 SP2","ecosystem":"SUSE Linux Enterprise","cpePart":null,"purl":"pkg:rpm/suse/supportutils&distro=SUSE Linux Enterprise Server for SAP Applications 12 SP2","purlType":"rpm","versions":[{"text":"< 3.0-95.21.1","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 3.0-95.21.1","eol":null,"hubHref":null},{"vendor":"suse","product":"supportutils&distro=SUSE Linux Enterprise Server for SAP Applications 12 SP3","name":"supportutils","label":"supportutils&distro=SUSE Linux Enterprise Server for SAP Applications 12 SP3","ecosystem":"SUSE Linux Enterprise","cpePart":null,"purl":"pkg:rpm/suse/supportutils&distro=SUSE Linux Enterprise Server for SAP Applications 12 SP3","purlType":"rpm","versions":[{"text":"< 3.0-95.21.1","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 3.0-95.21.1","eol":null,"hubHref":null},{"vendor":"suse","product":"supportutils&distro=SUSE Linux Enterprise Server for SAP Applications 12 SP4","name":"supportutils","label":"supportutils&distro=SUSE Linux Enterprise Server for SAP Applications 12 SP4","ecosystem":"SUSE Linux Enterprise","cpePart":null,"purl":"pkg:rpm/suse/supportutils&distro=SUSE Linux Enterprise Server for SAP Applications 12 SP4","purlType":"rpm","versions":[{"text":"< 3.0-95.21.1","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 3.0-95.21.1","eol":null,"hubHref":null},{"vendor":"suse","product":"supportutils&distro=SUSE OpenStack Cloud 7","name":"supportutils","label":"supportutils&distro=SUSE OpenStack Cloud 7","ecosystem":"SUSE Linux Enterprise","cpePart":null,"purl":"pkg:rpm/suse/supportutils&distro=SUSE OpenStack Cloud 7","purlType":"rpm","versions":[{"text":"< 3.0-95.21.1","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 3.0-95.21.1","eol":null,"hubHref":null}],"affectedCount":24,"eol":{"hasEol":false,"count":0},"references":[{"url":"https://www.suse.com/support/update/announcement/2019/suse-su-20191122-1/","label":"www.suse.com/support/update/announcement/2019/suse-su-20191122-1/","hostname":"www.suse.com","tags":["Advisory"]},{"url":"https://bugzilla.suse.com/1054979","label":"bugzilla.suse.com/1054979","hostname":"bugzilla.suse.com","tags":["REPORT"]},{"url":"https://bugzilla.suse.com/1099498","label":"bugzilla.suse.com/1099498","hostname":"bugzilla.suse.com","tags":["REPORT"]},{"url":"https://bugzilla.suse.com/1115245","label":"bugzilla.suse.com/1115245","hostname":"bugzilla.suse.com","tags":["REPORT"]},{"url":"https://bugzilla.suse.com/1117751","label":"bugzilla.suse.com/1117751","hostname":"bugzilla.suse.com","tags":["REPORT"]},{"url":"https://bugzilla.suse.com/1117776","label":"bugzilla.suse.com/1117776","hostname":"bugzilla.suse.com","tags":["REPORT"]},{"url":"https://bugzilla.suse.com/1118460","label":"bugzilla.suse.com/1118460","hostname":"bugzilla.suse.com","tags":["REPORT"]},{"url":"https://bugzilla.suse.com/1118462","label":"bugzilla.suse.com/1118462","hostname":"bugzilla.suse.com","tags":["REPORT"]},{"url":"https://bugzilla.suse.com/1118463","label":"bugzilla.suse.com/1118463","hostname":"bugzilla.suse.com","tags":["REPORT"]},{"url":"https://bugzilla.suse.com/1125623","label":"bugzilla.suse.com/1125623","hostname":"bugzilla.suse.com","tags":["REPORT"]},{"url":"https://bugzilla.suse.com/1125666","label":"bugzilla.suse.com/1125666","hostname":"bugzilla.suse.com","tags":["REPORT"]},{"url":"https://www.suse.com/security/cve/CVE-2018-19636","label":"www.suse.com/security/cve/CVE-2018-19636","hostname":"www.suse.com","tags":["WEB"]},{"url":"https://www.suse.com/security/cve/CVE-2018-19637","label":"www.suse.com/security/cve/CVE-2018-19637","hostname":"www.suse.com","tags":["WEB"]},{"url":"https://www.suse.com/security/cve/CVE-2018-19638","label":"www.suse.com/security/cve/CVE-2018-19638","hostname":"www.suse.com","tags":["WEB"]},{"url":"https://www.suse.com/security/cve/CVE-2018-19639","label":"www.suse.com/security/cve/CVE-2018-19639","hostname":"www.suse.com","tags":["WEB"]},{"url":"https://www.suse.com/security/cve/CVE-2018-19640","label":"www.suse.com/security/cve/CVE-2018-19640","hostname":"www.suse.com","tags":["WEB"]}],"lineage":{"upstream":["CVE-2018-19636","CVE-2018-19637","CVE-2018-19638","CVE-2018-19639","CVE-2018-19640"],"downstream":[],"duplicates":[],"related":["CVE-2018-19636","CVE-2018-19637","CVE-2018-19638","CVE-2018-19639","CVE-2018-19640"]},"timeline":[{"kind":"published","date":"2019-04-30T16:04:21.000Z","label":"Published","detail":"Vulnerability first disclosed.","source":null},{"kind":"modified","date":"2026-02-04T02:26:12.378Z","label":"Last modified","detail":"Vulnerability information updated.","source":null}],"risk":{"score":0,"level":"minimal","profile":"Default","thresholds":{"critical":75,"high":50,"medium":25,"low":10}},"meta":{"dataAsOf":"2026-10-19T10:49:09.708Z","stale":false,"partial":false}}